Amendments to the Claims 



A complete list of pending claims follows: 

1 . (Currently Amended) A method for performing a firmware update on a device 
of a computer system, comprising the steps of: 

saving a firmware update application and firmware to the computer system; 

verifying that the firmware update application has the authority to perform the 
firmware update, wherein verifying comprises the step of determining whether the firmware 
update application has access to a predetermined encryption key utilized by the computer system; 

encrypting validation data associated with the firmware update application and the 
firmware, wherein encrypting comprises the step of encrypting the validation data with a second 
encryption key that includes some content derived from an administrative password associated 
with the computer system ; 

restarting the computer system; 

locating the firmware update application and the firmware; 
decrypting the validation data; and 
initiating the firmware update application. 

2. (Previously Cancelled). 

3. (Currently Amended) The method for performing a firmware update on a device 
of a computer system of claim 1 , wherein the step of verifying that the firmware update 
application has the authority to perform the firmware update comprises the step of: 

encrypting a token with [[a]] die predetermined encryption key, the result being a 
first encrypted token; 

providing [[the]] an unencrypted token to the firmware update application; 

encrypting the token at the firmware update application, the result being a second 
encrypted token; 

comparing the first encrypted token and the second encrypted token; and 
allowing the method for performing a firmware update to continue if the first 
encrypted token matches the second encrypted token. 
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4. (Previously Amended) The method for performing a firmware update on a device 
of a computer system of claim 1, wherein the predetermined encryption key is maintained by the 
BIOS of the computer system. 

5. (Original) The method for performing a firmware update on a device of a 
computer system of claim 1, further comprising the steps of, 

setting a firmware update available flag following the step of encrypting the 
firmware update application and the firmware image; and 

initiating the firmware update application following a restart of the computer 
system only if it is determined that the firmware update available flag is set to true. 

6. (Canceled) 

7. (Currently Amended) The method for performing a firmware update on a device 
of a computer system of claim 1, wherein the step of encrypting th e validation data comprises the 
st e p of encrypting the validation data with an the second encryption key [[that]] is comprised of a 
token provided by the BIOS that is appended to [[an]] the administrative password associated 
with the computer system. 

8. (Original) The method for performing a firmware update on a device of a 
computer system of claim 1, wherein the firmware update application is DOS-based application. 

9. (Currently Amended) A method for updating the firmware of a target device in a 
computer system, comprising the steps of: 

providing a firmware update application and firmware update to the computer 

system; 

verifying that the firmware update application is authorized to update the 
firmware of the target device, wherein verifying that the firmware update application is 
authorized comprises the step of verifying that the firmware update application is operable to 
encrypt a data string according to a predetermined encryption key utilized by the computer 
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system; 

verifying that a user is authorized to update the firmware of the target device, 
wherein verifying that the user is authorized comprises the steps of: 
prompting the user for a password; and 

verifying that the password provided by the user is a predetermined user 

password; 

encrypting validation data associated with the firmware update application and the 
firmware, wherein encrypting the validation data comprises the steps of: 

forming a second encryption key, the second encryption key having 
content from the user password; and 

encrypting the validation data with the second encryption key; 
resetting the computer system; 
recognizing that a firmware update is available; 
decrypting the validation data; and 

replacing the existing firmware of the target device with the firmware update. 

1 0 . (Previously Cancelled) 

1 1 . (Currently Amended) The method for updating the firmware of a target device 
in a computer system of claim 9, wherein the step of verifying that the firmware update 
application is authorized to perform the firmware update comprises the steps of, 

encrypting a data string with [[a]] the predetermined encryption key, with the 
result being a first encrypted file; 

passing an unencrypted version of the data string to the firmware update 

application; 

encrypting at the firmware update application the data string with [[an]] the 
second encryption key, with the result being a second encrypted file; and 

comparing the first encrypted file to the second encrypted file. 

12. (Canceled) 
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13. (Canceled) 



14. (Original) The method for updating the firmware of a target device in a computer 
system of claim 9, wherein the step of recognizing that a firmware update is available comprises 
the steps of, 

setting a firmware update available flag; and 

recognizing, following a reset of the computer system, that a firmware update 
available flag has been set to indicate that a firmware update is available. 

15. (Currently Amended) The method for updating the firmware of a target device 
in a computer system of claim [[13]] 9, wherein the step of decrypting the validation data 
comprises the step of decrypting the validation data with the second encryption key. 

1 6. (Currently Amended) A method for updating the firmware of a device of a 
computer system, comprising the steps of: 

providing a firmware update to the computer system, the firmware update 
comprising a firmware update application and a firmware image; 

verifying that the firmware update application is authorized to update the 
firmware of the device, wherein verifying comprises the step of verifying that the firmware 
update application has access to a predetermined encryption key utilized by the computer system; 

encrypting validation data associated with the firmware update application and the 
firmware image, wherein encrypting comprises the step of encrypting the validation data with a 
second encryption key that includes some content derived from an administrative password 
associated with the computer system; 

verifying that the user of the computer system is authorized to update the 
firmware of the device; 

causing the computer system to recognize that a verified firmware update is 
available for the device of the computer system; and 

executing the firmware update application to cause the firmware image to replace 
the existing firmware of the device. 
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17. (Original) The method for updating the firmware of a device of a computer system 
of claim 16, wherein the step of causing the computer system to recognize that a firmware update 
is available, comprises the steps of, 

setting a firmware update available flag following the successful completion of 
the verification steps; 

resetting the computer system; and 

recognizing during the boot of the computer system that a firmware update 
available flag has been set. 

1 8 . (Previously Cancelled) 

19. (Currently Amended) The method for updating the firmware of a device of a 
computer system of claim 16, wherein the step of verifying that the use of the computer is 
authorized to update the firmware of the device comprises the step of verifying that the user 
enters [[an]] die administrative password associated with the computer system. 

20. (Original) The method for updating the firmware of a device of a computer system 
of claim 16, wherein the firmware update application is a DOS-based application. 

2 1 . (Currently Amended) A computer system, comprising: 
a processor; 

memory; 

a device driven by firmware associated with the device; 

wherein the computer system is operable to update the firmware of the device by, 
receiving a firmware update application and firmware image; 
verifying that the firmware update application is authorized to update the 
firmware of the device, wherein verifying comprises the step of verifying that the 
firmware update application has access to a predetermined encryption key utilized by the 
computer system; 

encrypting validation data associated with the firmware update application 
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and the firmware image, wherein encrypting comprises the step of encrypting the 
validation data with a second encryption key that includes some content derived from an 
administrative password associated with the computer system; 

verifying that the user of the computer system is authorized to update the 
firmware of the device; 

setting a firmware update available flag if both the firmware update 
application and the user are authorized to update the firmware of the device; and 

resetting the computer system; 

executing the firmware update application to update the firmware of the 
device with the firmware image. 
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